Web Application Security

Deploying web application firewalls can be difficult in mixed environments. Prisma Cloud simplifies deployments with agent-based and agentless deployment options for all cloud-native applications, delivering full, customizable support for the OWASP Top 10.

• Secure web applications from top security risks

  Cover SQL injection, cross-site scripting, code injection and other attacks targeting OWASP Top 10 risks.

• Enforce application security on microservices locally

  Implement a positive security model at the service level to keep up with auto scaling, ephemeral environments.

• Leverage full, customizable protection

  Select which enforcement mechanism — alert, prevent or ban — to apply to each security scenario.

• Deploy agents as a part of your DevOps workflow

  Use code-based deployment mechanisms to enable automatic deployment of protection with every code push.

• Out-of-band

  Utilize full application -layer visibility into APIs and detect and alert against application-layer attacks in near-real time — without applying any latency or risk to the application.

• Scalable protection

  As your application grows in your deployment, the number of defenders grows as well, tailoring protection to the application needs.

Gaining visibility into protected and unprotected web applications is the first step toward comprehensive protection. That’s why Prisma Cloud automatically identifies the protection status of web apps to quickly enable customizable protection with a simple, straightforward UI.

• Find and protect your entire web app surface

  Use Prisma Cloud to detect unprotected web applications and flag them for protection.

• Leverage advanced analytics for investigations

  Use analytics to observe events in aggregate from different points of view. Filter them and dive into individual events for incident investigations.

• View all security events in a single console

  Identify vulnerabilities, compliance violations, runtime events and application risk events in one product.

In an internet full of bots, not all bots are malicious. Gain visibility into bot activity to allow good bots like search engine crawlers to go through while malicious bots are blocked.

• Allow and monitor known bots

  Allow good bots such as search engine crawlers and news bots to crawl your applications but monitor and block abusive behavior.

• Control unknown bots

  Alert or block requests originating from bots with unknown intent, including headless browsers, command-line tools and good-bot impersonators.

• Define custom bots

  Create bot definitions for bots your team designates as known-good or malicious.

• Configurable for each application

  Set application-level or individual-service-level configurations for bot protection rules.

Protecting your application from unwanted access is a top priority for application security teams. WAAS allows for control over how applications and end users communicate with the protected web application.

• Control inbound access to the application

  Network controls allow administrators to deny inbound access to the application as well as allowed IPs.

• Block requests based on headers

  WAAS lets you block or allow requests that contain specific strings in HTTP headers.

• Protect against malicious files

  Protect your applications against malware dropping by restricting uploads to just the files that match allowed content types.